base/firewall: add post